Privacy Policy higame0 – How We Protect Your Personal Data

1 Who We Are – Your Data Controller

The higame0 is the online entertainment platform available at higame0.net, responsible for processing the personal data of users registered in Brazil. For the purposes of the LGPD (Law 13.709/2018), the higame0 acts as data controller, meaning it defines the purpose and means of processing the information collected.

This Privacy Policy applies to all users of the platform higame0 — whether registered users or visitors — covering all services offered: live casino, crash games, slots, poker, blackjack, and Sports Betting on competitions such as the Libertadores, Copa do Brasil, and Brasileirão Série A.

To contact the data protection officer (DPO) of the higame0, use the email suporte@higame0.net or the support chat available 24 hours a day on the platform.

2 What Data We Collect and How

The higame0 collects personal data at different points throughout your interaction with the platform. Below are the data types, collection methods, and the moments at which collection occurs:

The higame0 does not collect sensitive data such as race, ethnicity, political opinion, religious belief, or genetic or biometric data, except where required by law for specific fraud prevention purposes.

3 How We Use Your Data

The data collected by the higame0 are used exclusively for the purposes described below. Each use is tied to a specific legal basis under the LGPD, as described in the following clause:

• Create and manage your account — user identification, authentication, and profile management.
• Process deposits and withdrawals — processing of transactions via Pix, bank slip, credit/debit card, Mercado Pago, and PicPay.
• Provide customer support — personalized assistance via chat or email, in English, 24 hours a day.
• Prevent fraud and money laundering — transaction monitoring and identity verification in accordance with regulatory obligations.
• Comply with legal obligations — providing information to competent authorities when required by law.
• Improve the platform — aggregated analysis of usage behavior to improve features, speed, and the overall player experience.
• Send relevant communications — updates on promotions, free bets, poker tournaments, or offers related to the Copa do Brasil and Libertadores, only for users who have opted in.
• Apply responsible gambling tools — monitoring of usage patterns to provide preventive alerts and apply limits requested by the user.

The higame0 does not use personal data for fully automated decision-making that produces significant legal effects without the possibility of human review.

4 Legal Basis for Processing (LGPD)

Each data processing operation carried out by the higame0 has a specific legal basis under the LGPD (Art. 7). These are the bases we rely on:

• Contract performance (Art. 7, V) — processing required to deliver platform services, handle Pix payments, and manage user accounts.
• Compliance with a legal obligation (Art. 7, II) — sharing data with tax, anti-money laundering and regulatory authorities when required under Brazilian law.
• Legitimate interest (Art. 7, IX) — security monitoring, fraud prevention, and aggregated platform usage analysis, provided it does not override the data subject's fundamental rights.
• Consent (Art. 7, I) — sending promotional communications by email, SMS or push notification. Consent may be withdrawn at any time without affecting access to any other services.

5 Data Sharing with Third Parties

The higame0 does not sell users' personal data to third parties. Data sharing only occurs in the situations below, always with a specific and proportionate purpose:

• Payment gateways — to process transactions via Pix, boleto, credit/debit card, Mercado Pago and PicPay. These providers receive only the data required to complete the transaction and are contractually bound to maintain confidentiality.
• Game providers — companies that provide the Live Casino, slots, and Crash Games available on the platform. Data sharing is limited to the technical information required to run the game session.
• Analytics and security services — fraud prevention and risk analysis platforms that process anonymized or pseudonymized behavioral data.
• Competent authorities — Federal Revenue Service, Central Bank, anti-money laundering authorities (COAF), and other Brazilian regulatory bodies, when required by law.
• Technical support providers — companies that support the platform's technological infrastructure, under contracts with strict data protection clauses.

All third parties that process personal data of users of the higame0 are assessed for their security practices prior to engagement and are subject to contractual LGPD compliance obligations.

6 Cookies and Tracking Technologies

The higame0 uses cookies and similar technologies to ensure the platform works correctly, improve the user experience, and analyze aggregate service usage. The types of cookies used are outlined below:

• Essential cookies — required to keep the session active, authenticate logins, and ensure transaction security. They cannot be disabled without compromising platform functionality.
• Performance cookies — collect anonymous data on how users navigate the platform (most visited pages, load times, errors) to identify areas for improvement.
• Functionality cookies — remember your preferences such as language, odds settings and betting slip layout to personalize your experience without requiring you to reconfigure on every visit.
• Analytical cookies — used with audience analytics tools to understand the aggregate behavior of higame0 users higame0 in Brazil. Data is anonymized before processing.

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent proper account access and the ability to complete transactions. Non-essential cookies can be disabled without affecting access to the platform.

7 Data Storage & Security

The personal data of higame0 users higame0 are stored on servers with multi-layered security infrastructure:

• Encryption in transit — all data transmitted between your device (mobile, computer, or tablet) and the servers of higame0 uses TLS 1.3 protocol with 256-bit encryption.
• Encryption at rest — sensitive data such as CPF, banking information, and transaction history is stored with AES-256 encryption on our servers.
• Access control — only employees with a verified operational need have access to users' personal data. All internal access is logged and periodically audited.
• Two-factor authentication — available for all platform accounts, with verification via the registered mobile number.
• Continuous monitoring — automated intrusion detection and anomalous behavior monitoring systems operate 24 hours a day, with immediate alerts to the security team.
• Hashed passwords — user passwords are never stored in plain text. We use salted hash algorithms to ensure that passwords are not exposed even in the event of a security incident.

8 How Long We Keep Your Data

The higame0 retains personal data for as long as necessary to fulfill the purposes described in this policy, in compliance with the minimum retention periods required by Brazilian law:

• Active account data — retained for as long as the account is active and for up to 5 years after closure, to meet legal and tax obligations.
• Financial transaction history — retained for a minimum of 5 years as required by the Receita Federal and anti-money laundering legislation.
• Access logs — retained for 6 months in accordance with the Brazilian Internet Civil Rights Framework (Lei 12.965/2014).
• Support communications — retained for 2 years for quality assurance and dispute resolution purposes.
• Fraud prevention data — retained for as long as necessary to complete investigations, and may be extended at the request of a competent authority.

After the periods above, data is securely deleted or anonymized for statistical purposes, making it no longer possible to individually identify the data subject.

9 Your Rights as a Data Subject

The LGPD guarantees a set of rights to all personal data subjects. At higame0, these rights can be exercised simply, via support chat or email, with a response within 15 business days:

To exercise any of these rights, contact us via the support chat on the platform or by email at suporte@higame0.net with the subject line "LGPD Rights". You will receive an immediate confirmation of receipt and a full response within 15 business days.

If the higame0 fails to address your request satisfactorily, you may file a complaint with the ANPD (National Data Protection Authority), the LGPD regulatory authority in Brazil.

10 Minors

The platform higame0 is intended exclusively for users aged 18 and over who are residents of Brazil. The higame0 does not intentionally collect personal data from users under 18 years of age.

The CPF and date of birth provided at registration are verified to confirm legal age. Accounts created with false information to bypass this verification are closed immediately and the balance may be withheld. If you believe a minor's account was created improperly, please contact support — the higame0 commits to investigating and closing the account within 24 hours of verified notification.

11 International Data Transfers

Due to the nature of global technology infrastructure, some personal data of higame0 users higame0 may be processed or stored on servers located outside Brazil — primarily in the case of game providers and cloud infrastructure services.

When this transfer occurs, the higame0 ensures that:

• The destination country offers an adequate level of protection, as assessed by the ANPD, or
• There are specific contractual clauses requiring the recipient to apply protections equivalent to those under the LGPD, or
• The data subject has given specific consent for the transfer, with clear information about the risks involved.

Financial transaction data — including Pix, boleto bancário, credit/debit card, Mercado Pago, and PicPay information — is processed primarily within Brazilian territory by gateways certified in the country.

12 Security Incidents

Even with all security measures in place, the higame0 acknowledges that no system is 100% immune to incidents. In the event of a data breach that may pose significant risk to data subjects, the higame0 will follow the procedure below:

• Within 72 hours of becoming aware of the incident: notification to the ANPD including a description of what occurred, the data affected, measures taken, and the responsible DPO — as required by the LGPD.
• Without undue delay: direct communication to all affected data subjects via email and in-platform notification, with clear details about what happened, which data was exposed, and the steps we recommend to protect your account.
• Full investigation with a remediation plan and report made available to the ANPD.

The higame0 maintains an up-to-date incident response plan and conducts regular security tests to identify vulnerabilities before they can be exploited.

13 Changes to this Privacy Policy

The higame0 may periodically update this Privacy Policy to reflect changes in the services offered, Brazilian legislation, or security practices adopted. Any relevant change will be communicated at least 7 days in advance by registered email and in-platform notification.

The current version is always the one published on this page, with the update date indicated at the top of the document. Continuing to use the platform higame0 after the effective date of the new version constitutes acceptance of the changes. If you disagree with the updates, you may request account closure before the effective date, as described in the Terms and Conditions.

For changes that involve a new purpose for the use of your data, new third-party sharing arrangements or any processing that requires consent, we will request your explicit authorization before implementation — it will not be assumed from your continued use of the platform.

14 Contact, DPO & Support Channels

For any questions related to this Privacy Policy, the processing of your personal data, or the exercise of your rights as a data subject, the higame0 provides the following contact channels:

• Live chat — available 24 hours a day, 7 days a week, directly on the higame0.net platform. For privacy matters, start the chat with the subject "Privacy & LGPD".
• DPO Email — suporte@higame0.net with the subject line "LGPD Rights" for formal requests regarding access, correction, deletion, or portability. Response time: up to 15 business days.

The Data Protection Officer (DPO) of the higame0 is responsible for ensuring internal LGPD compliance and for serving as the point of contact between the higame0, the data subjects, and the ANPD. If your request is not resolved to your satisfaction, you have the right to file a complaint directly with the ANPD, Brazil's data protection regulatory authority.